General
- Target DeepRedBot.exe
- Size 36.1MB
- Sample260704-bc9zcses8r
- SHA256 a5631f72ce2336ba05e2c26808a4ccca185a8b4a0a4f2c46de8872e2b54e23be
- MD5 0ee935f9e9889fd5a7a2a75b4d3b96d5
- SHA1 2886c5c914bdb55c8ab20dcd1951814899512d08
- SHA512 1980a813eec2cb1ca500c52d4f038748f0b63315587039a3e2c375535871e635da3a708d25482415be165bcd87e14c71624e48cc7375c49ef65888207aea1ae2
- SSDEEP 786432:82Z3pMtZdBlkSZFsmyIuFFIdXkLEgkcERE+Z89OnzX:DoZLCSrslI0IlkoBE+3T
- TLSH T1D7871256E2FD00E8D5BAC0B8C6575517E7B234591734A7EB52A08A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeepRedBot.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target DeepRedBot.exe
- Size 36.1MB
- SHA256 a5631f72ce2336ba05e2c26808a4ccca185a8b4a0a4f2c46de8872e2b54e23be
- MD5 0ee935f9e9889fd5a7a2a75b4d3b96d5
- SHA1 2886c5c914bdb55c8ab20dcd1951814899512d08
- SHA512 1980a813eec2cb1ca500c52d4f038748f0b63315587039a3e2c375535871e635da3a708d25482415be165bcd87e14c71624e48cc7375c49ef65888207aea1ae2
- SSDEEP 786432:82Z3pMtZdBlkSZFsmyIuFFIdXkLEgkcERE+Z89OnzX:DoZLCSrslI0IlkoBE+3T
- TLSH T1D7871256E2FD00E8D5BAC0B8C6575517E7B234591734A7EB52A08A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.